[sssd] Disable NSCD cache as recommended

Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
certbot_on_virtu
Yohann D'ANELLO 2021-06-26 08:22:19 +02:00
parent 70d335e1b8
commit 816f192016
Signed by: _ynerant
GPG Key ID: 3A75C55819C8CF85
1 changed files with 9 additions and 0 deletions

View File

@ -37,6 +37,15 @@
- {name: networks, db: files ldap}
- {name: hosts, db: files ldap dns}
- name: Disable nscd cache
lineinfile:
dest: /etc/nscd.conf
regex: "^enable-cache +{{ item }}"
line: "enable-cache {{ item }} no"
loop:
- "passwd"
- "group "
- name: Configure PAM authentication
template:
src: pam.d/common-password.j2